Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

question about O20 entry

benanna

Posted 06 March 2006 - 08:08 AM

benanna

Member

Member

10 posts

I am new to HijackThis analysis, so please bear with me.

About a month ago, I noticed that our DSL internet connection was much slower than normal. A few days ago, I got a call from my ISP saying that I must have a virus, because they were getting spam from my computer. I then noticed that when I am connected to the internet, my computer is continuously transmitting packets, even when I don't have any applications running. I have gone through the whole "Required steps" list over the last couple of days, running Adaware, Spybot, Ewido, and the TrendMicro online scan, but I still had a slow connection and the computer was still continuously uploading. I then installed ZoneAlarm and noticed that if I block access to winlogon.exe, the computer stops the continuous upload.

I have run HijackThis, and there are three O20 entries. Two of them are listed as file missing, but the third is "iclmirqv.dll", which was last modified 2/9/2006, about the same time I started having problems. I checked the O20 list at http://www.castlecops.com/O20.html, but "iclmirqv.dll" is not listed. A google search for this file also turned up nothing.

Any thoughts or recommendations on next steps? Thanks for your help.

Please do not post hijack this logs in any other forum than the malware forum. your log has been removed and re-attached as a text file

Advertisements

dsenette

Posted 06 March 2006 - 08:22 AM

dsenette

Je suis Napoléon!

Administrator

26,019 posts

Please go to the malware forum in my signature and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.